rejetto forum

Software => HFS ~ HTTP File Server => Topic started by: youngbucks on July 04, 2008, 04:01:55 PM

Title: Kaspersky antivirus 2009 detects HFS as virus
Post by: youngbucks on July 04, 2008, 04:01:55 PM
Just a heads up to everyone if you come across this, Kaspersky antivirus 2009 detects HFS as a virus and this is a false positive. I will be sending a message to them shortly to get this fixed! Don't get worried if you come across this :D

Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: SilentPliz on July 04, 2008, 08:47:32 PM
Hello!

I do not know where you've downloaded your hfs.exe, but if it is on rejetto.com, this is a false positive.

HFS is healthy.

If this is a false positive, you can send a message to Kaspersky Lab, for correct their viral base.


Edit:
I downloaded the hfs.exe on the link to your image.
I scanned with Nod32 ... it seems clean.

Certainly, a false positive ... But when in doubt, download your version on the author's site (a valid precautions for the majority of software).
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: youngbucks on July 05, 2008, 12:15:49 AM
The image you see actually was from the website. I clicked the link to download and that is what i ended up with. Im waiting for Kaspersky to fix this because it keeps deleting HFS off my computer and its blocking connections.
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: SilentPliz on July 05, 2008, 10:35:33 AM
You have to give the necessary permissions for the file or link in your firewall and your anti virus.
(Kaspersky?)
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: youngbucks on July 05, 2008, 12:57:31 PM
I have already done that but Kaspersky Antivirus is very hostile and stubborn, plus i already paid my money for my key so changing is not an option :-\
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: SilentPliz on July 05, 2008, 01:52:29 PM
If you have the license Kaspersky, send their one-mail to report the problem.
I don't see what to do else.

Your problem seems beyond hfs.

I am sorry for not being able to help you more. :-\

Maybe someone else to an idea? ...
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: youngbucks on July 05, 2008, 03:14:29 PM
Its ok, this was just a heads up for everyone :P Im going to purchase a server sided PC and run HFS on that instead, but now i know not to use Kaspersky :D ;)
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: Damian on July 05, 2008, 11:24:27 PM
Quote
w*w.virustotal.com
Best way is to double check here...multiple scanners
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: Damian on July 05, 2008, 11:28:02 PM
Quote
Antivirus Versie Laatst geüpdatet Resultaat
AhnLab-V3 2008.7.4.1 2008.07.05 -
AntiVir 7.8.0.64 2008.07.05 -
Authentium 5.1.0.4 2008.07.04 -
Avast 4.8.1195.0 2008.07.05 -
AVG 7.5.0.516 2008.07.05 -
BitDefender 7.2 2008.07.05 -
CAT-QuickHeal 9.50 2008.07.04 -
ClamAV 0.93.1 2008.07.05 -
DrWeb 4.44.0.09170 2008.07.05 -
eSafe 7.0.17.0 2008.07.03 Suspicious File
eTrust-Vet 31.6.5927 2008.07.04 -
Ewido 4.0 2008.07.05 -
F-Prot 4.4.4.56 2008.07.04 -
F-Secure 7.60.13501.0 2008.07.03 -
Fortinet 3.14.0.0 2008.07.05 -
GData 2.0.7306.1023 2008.07.05 -
Ikarus T3.1.1.26.0 2008.07.05 -
Kaspersky 7.0.0.125 2008.07.06 not-a-virus:Server-FTP.Win32.SFH.t
McAfee 5332 2008.07.04 -
Microsoft 1.3704 2008.07.06 -
NOD32v2 3244 2008.07.05 -
Norman 5.80.02 2008.07.04 -
Panda 9.0.0.4 2008.07.05 -
Prevx1 V2 2008.07.06 Suspicious
Rising 20.51.42.00 2008.07.04 -
Sophos 4.31.0 2008.07.05 -
Sunbelt 3.1.1509.1 2008.07.04 -
Symantec 10 2008.07.05 -
TheHacker 6.2.96.373 2008.07.05 -
TrendMicro 8.700.0.1004 2008.07.05 -
VBA32 3.12.6.8 2008.07.05 suspected of Backdoor.Delf.180 (paranoid heuristics)
VirusBuster 4.5.11.0 2008.07.05 -
Webwasher-Gateway 6.6.2 2008.07.05 -
Title: Re: avast detects HFS as virus
Post by: allen on July 15, 2008, 02:53:42 AM
ALSO AVAST,also alarm !
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: rejetto on July 15, 2008, 06:27:21 AM
this may be a plot for an x-files episode
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: m3gab0y on June 12, 2009, 03:10:32 AM
My A/V also detects this as a virus. I Use ClamAV. I also have reported a false positive to the support team.
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: MarkV on June 12, 2009, 03:26:10 AM
My A/V also detects this as a virus. I Use ClamAV. I also have reported a false positive to the support team.

This message is not from ClamAV, but from Spyware Terminator.
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: slasherx on June 17, 2009, 12:07:52 PM
i've always used kaspersky, and been using hfs for long time never get virus error.
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: PolarFox on June 19, 2009, 05:49:54 AM
use good av, such a NOD.

KAV is very stupid and officious  :P He saw mIRC client as trojan...
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: ingo on July 27, 2009, 10:19:17 AM
This morning Avira (http://www.avira.com) detected a virus in the actual version an in the beta version of hfs. The original message reads:
Die Datei 'D:\_install\_Util\_www\http_Server\hfs242.exe'
enthielt einen Virus oder unerwünschtes Programm 'APPL/HTTPFileServ.1' [program].
I downloaded (all) versions of hfs from rejetto directly.
As Kaspersky found a virus as well, we have to ask the author, Massimo Melina, to remove the critical code.
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: parade on July 27, 2009, 11:30:52 AM
Die Datei 'D:\_install\_Util\_www\http_Server\hfs242.exe'
enthielt einen Virus oder unerwünschtes Programm 'APPL/HTTPFileServ.1' [program].[/color]
As Kaspersky found a virus as well, we have to ask the author, Massimo Melina, to remove the critical code.
Why are you wondering if you download a HTTP-Server and you Antivirus program says, that it is a HTTP-Server?
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: ingo on July 27, 2009, 11:35:53 AM
Maybe there is something wrong with the version on the server. And maybe some other virus on the server or on the compiling computer adds something to hfs.exe
So it is not a bad idea for Massimo Melina to check it and to tell us, if everything is o.k.
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: SilentPliz on July 27, 2009, 11:44:20 AM
There is no critical code in HFS
Your antivirus tells you simply that HFS connects to Internet, that which is potentially risky.

APPL/HTTPFileServ = APPLICATION/HTTP FILE SERVER = HFS

Your message is a recurring message, as the message of some antiviruses programs.   :D

Performs a search on the forum ... you'll see.  ;)

eg:

http://www.rejetto.com/forum/index.php?topic=5991.msg1044195;topicseen#msg1044195

http://www.rejetto.com/forum/index.php?topic=7256.0

http://www.rejetto.com/forum/index.php?topic=6318.0

....  ;D


EDIT:

I use Avira Premium Security Suite, which did not mention anything about HFS
 
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: TSG on July 27, 2009, 01:03:13 PM
Does no one check the FAQ's..

http://www.rejetto.com/forum/index.php?topic=7239.0
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: SilentPliz on July 27, 2009, 01:06:33 PM
Mea culpa, I had never read this one!  :-[ :D
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: ingo on July 27, 2009, 02:06:42 PM
Well, but what has changed that the HFS.exe version 2.2d #152 does not have any virus
http://www.virustotal.com/en/analisis/de45348a5b94de3fc9e30f7e5031bf1e13775cf47991b8ef132ac0e79718e528-1248700026

but the beta version 2.2f #242 seems to have...
http://www.virustotal.com/analisis/f11b8cbb68023da2ab8dc7f8d55bd247cddf595a4f4d04d17159983a8d6794c1-1248695248
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: SilentPliz on July 27, 2009, 03:15:35 PM
   
You should not just be afraid of what is written in red colour, you should also read the content of messages. ;)
Some are more explicit than others:

not-a-virus: Server-FTP.Win32.SFH

What has changed between 2 versions of HFS?

The date of publication, among others.
   
hfs_2.2f_242.exe does not exist ... It's you who have renamed the executable?

Otherwise the two links you have posted, show almost the same things.


You will notice that many anti virus don't report anything ... ineffectiveness or wisdom? ;)
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: ingo on July 27, 2009, 04:11:48 PM
Yes, I have changed the names. And you are right: The results of the anti virus scanners often seem to be exact but lack a deeper explanation.

By the way. The Author just stated in an e-mail that everything is fine and free of any virus. He complained about the bad working anti virus progs as well.

I hope the antivirus guys will learn soon to throw no wrong warnings regarding HFS and notice that this is a great http-server.
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: MarkV on July 28, 2009, 09:18:03 AM
Quote
I hope the antivirus guys will learn soon to throw no wrong warnings regarding HFS and notice that this is a great http-server.
You wish.
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: rejetto on July 28, 2009, 02:29:40 PM
please, kaspersky users report your problem at
http://forum.kaspersky.com/index.php?showtopic=13881
Title: Re: Kaspersky antivirus 2009 detects HFS as virus
Post by: Guest on August 05, 2009, 04:39:42 PM
Update 09.08.2009

Avira v. 8.02.00.240 detected a "unwanted program" (category: Maleware) in the actual version 2.2f of hfs.

The original message reads:
"Maleware"
"hfs.exe wurde ein Virus oder unerwünschtes Programm 'APPL/Agent.572928' [program] gefunden"
NO VIRUS !!!
Avira Filepath contains: "\...\hfs.exe:Zone.Identifier" ???

This happens if " Search for APPL" (Applications) is activated.
And it is maybe not a false alarm because "APPL-warning" is defined as "... APPL could maybe include a risk".

" SilentPliz is right.
... Your antivirus tells you simply that HFS connects to Internet, that which is potentially risky.
APPL/HTTPFileServ = APPLICATION/HTTP FILE SERVER = HFS"

bye